Privacy Policy

At Athar, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use the Khatma mobile application (the "App").

By using Athar, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the App.

1. Information We Collect

1.1 Personal Information

When you create an account with Athar, we collect the following personal information:

• Display Name: The name you choose to display to other users in the App
• Email Address: Used for account creation, authentication, and communication
• Profile Photo: Optional image you may choose to upload for your profile
• Authentication Credentials: Password (encrypted) or Google Sign-In authentication tokens

1.2 Khatma Group Data

When you create or participate in Khatma reading groups, we collect and store:

• Group Name: The name of the Khatma group you create or join
• Creator Information: Details about who created each group
• Participants List: Information about all members of a group
• Part Assignments: Records of which Juz (parts) each participant has claimed
• Completion Status: Timestamps and status of when parts are marked as completed
• Join Codes: Unique 6-character codes generated for group sharing

1.3 Technical Information

To provide core functionality and notifications, we collect:

• Push Notification Tokens: Firebase Cloud Messaging (FCM) tokens to send you notifications about group activities
• Authentication Tokens: Secure tokens used to maintain your logged-in session

2. How We Use Your Information

We use the collected information for the following purposes:

2.1 Core App Functionality

• Creating and managing your user account
• Authenticating your identity and maintaining secure access
• Displaying your profile information to other group members
• Creating and managing Khatma reading groups
• Tracking part claims and completion progress within groups
• Facilitating collaboration between group members

2.2 Communication

• Sending push notifications about group activities, new participants, completed parts, and other relevant updates
• Communicating important updates about the App or your account (when necessary)

2.3 Service Improvement

• Ensuring the App functions properly and efficiently
• Troubleshooting technical issues
• Improving user experience based on feedback

We do not:

• Sell your personal information to third parties
• Use your data for advertising or marketing purposes
• Share your information with anyone except as necessary to provide the service (see Third-Party Services section)

3. Data Storage and Security

3.1 Where Your Data is Stored

Your data is securely stored using Google Firebase services, including:

• Firebase Authentication: For secure account management
• Cloud Firestore: For storing user profiles, group data, and activity records
• Firebase Cloud Messaging: For delivering push notifications

Firebase infrastructure employs industry-standard security measures and is compliant with major privacy regulations.

3.2 Data Security Measures

We implement appropriate technical and organizational security measures to protect your data:

• All data transmissions are encrypted using industry-standard protocols (HTTPS/TLS)
• Passwords are securely hashed and never stored in plain text
• Firebase Security Rules restrict unauthorized access to your data
• Authentication tokens are securely managed and regularly refreshed
• Access to backend systems is strictly controlled and monitored

3.3 Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. Currently, we do not automatically delete data, but we are implementing account deletion functionality (see "Your Rights" section below).

4. Third-Party Services

Athar uses the following third-party services to provide functionality:

4.1 Google Firebase

We use Firebase services (Authentication, Cloud Firestore, Cloud Messaging, and Hosting) provided by Google LLC. Firebase processes your data on our behalf to provide backend infrastructure and services.

• Firebase Privacy Policy: https://firebase.google.com/support/privacy

4.2 Google Sign-In

If you choose to sign in with Google, we use Google's authentication services. When you use Google Sign-In, we only receive your email address and basic profile information that you authorize Google to share with us.

• Google Privacy Policy: https://policies.google.com/privacy

Important: These third-party services have their own privacy policies. We encourage you to review their policies to understand how they handle your data.

5. Data Sharing and Visibility

5.1 Within Khatma Groups

When you join a Khatma group, the following information is visible to other group members:

• Your display name
• Your profile photo (if you've uploaded one)
• Which Juz (parts) you have claimed
• Your completion status for claimed parts

By joining a group, you consent to sharing this information with other members of that specific group.

5.2 No External Sharing

We do not sell, trade, or rent your personal information to third parties. We do not share your data with anyone except:

• Firebase/Google services as necessary to operate the App
• Other users within your Khatma groups (as described above)
• When required by law or to protect our rights and safety

6. Your Rights and Choices

You have the following rights regarding your personal data:

6.1 Access and Update

You can access and update your profile information at any time through the App's profile settings, including:

• Display name
• Profile photo
• Email address (may affect account access)

6.2 Push Notifications

You can control push notifications through:

• Your iOS device settings (Settings > Notifications > Khatma)
• In-app notification preferences (coming soon)

6.3 Account Deletion

We are currently implementing account deletion functionality. Once available, you will be able to delete your account and associated data directly through the App. When you delete your account:

• Your profile information will be permanently deleted
• Your participation records in Khatma groups will be removed
• Any groups you created may be transferred to another participant or deleted (based on group settings)
• The deletion process may take up to 30 days to complete fully across all systems

Until this feature is available, if you wish to delete your account and data, please contact us at the email addresses provided in the Contact section below.

6.4 Data Portability

You may request a copy of your personal data by contacting us. We will provide your data in a structured, commonly used format.

7. Children's Privacy

Athar does not have a specific age restriction, as the App is designed for community Quran reading, which is an activity practiced by Muslims of all ages. However, we are committed to protecting the privacy of all users, including minors.

If you are a parent or guardian and believe your child has provided personal information to us, please contact us immediately so we can take appropriate action.

We do not knowingly collect personal information from children under 13 without parental consent in jurisdictions where such consent is required by law.

8. International Data Transfers

Your data may be transferred to and stored on servers located outside your country of residence, including in the United States where Firebase servers are located. By using Athar, you consent to the transfer of your data to countries that may have different data protection laws than your country.

We ensure that appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:

• We will update the "Last Updated" date at the top of this policy
• For material changes, we will notify you through the App or via email
• Your continued use of the App after changes constitutes acceptance of the updated policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

10. Legal Compliance

We may disclose your information if required to do so by law or in response to valid requests by public authorities, including to:

• Comply with legal obligations
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing
• Protect the personal safety of users or the public